RGBCube/serenity
1
Fork 0
mirror of https://github.com/RGBCube/serenity synced 2025-07-25 06:07:34 +00:00
Code Issues Activity Actions

LibJS/JIT: Fix crash in CallWithArgumentArray

Browse source
This commit is contained in:
Evgeniy Baskov 2023-10-28 23:27:52 +03:00 • committed by Andreas Kling
parent 40ecf7689b
commit 9258e253ca
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
Userland/Libraries/LibJS/JIT/Compiler.cpp
View file

@ -937,6 +937,9 @@ void Compiler::compile_call_with_argument_array(Bytecode::Op::CallWithArgumentAr
m_assembler.mov(
Assembler::Operand::Register(ARG3),
Assembler::Operand::Imm(to_underlying(op.call_type())));
m_assembler.mov(
Assembler::Operand::Register(ARG4),
Assembler::Operand::Imm(bit_cast<u64>(&op.expression_string())));
native_call((void*)cxx_call_with_argument_array);
store_vm_register(Bytecode::Register::accumulator(), RET);
check_exception();